Chapter I General Provisions Article 1 In order to strengthen the security management of international networking of computer information systems and ensure the security of state secrets, these Provisions are formulated in accordance with the Law of People's Republic of China (PRC) on Guarding State Secrets and relevant state laws and regulations. Article 2 The international networking of computer information systems refers to the international networking of computer information systems in People's Republic of China (PRC) to realize the international exchange of information. Article 3 All individuals, legal persons and other organizations (hereinafter referred to as users), interconnected units and access units engaged in international networking shall abide by these Provisions. Article 4 The security management of international networking of computer information systems follows the principles of controlling the source, centralized management, graded responsibility, highlighting key points and promoting development. Article 5 The national security department is responsible for the security of the international networking of the national computer information system. The local security departments at or above the county level shall be in charge of the international networking security of computer information systems within their respective administrative areas. The central state organs shall, within the scope of their functions and powers, be responsible for or guide the security work of the international networking of the computer information system of this system. Chapter II Security System Article 6 Computer information systems involving state secrets shall not be directly or indirectly connected with the Internet or other public information networks, and must be physically isolated. Article 7 Information involving state secrets, including information that has been legally exchanged with foreign specific objects upon examination and approval in foreign exchanges and cooperation, shall not be stored, processed or transmitted in computer information systems connected to the Internet. Eighth network information security management adhere to the principle of "who is responsible for the Internet". Any information provided or published to international websites must be subject to confidentiality review and approval. The confidential examination and approval shall be managed by departments, and the relevant units shall establish and improve the leadership responsibility system for the confidential examination and approval of online information according to the national laws and regulations on confidentiality. Units providing information shall, in accordance with certain working procedures, improve the information confidentiality examination and approval system. Article 9 If the information collected for providing online information services has been published in other news media, the organizer shall obtain the consent of the information provider before publishing it online; Where online information is expanded or updated, the information confidentiality review system should be seriously implemented. Tenth units and users who set up electronic bulletin boards, chat rooms and online news groups on the Internet shall be examined and approved by the corresponding security agencies, and their security requirements and responsibilities shall be clarified. No unit or individual may publish, discuss or disseminate state secret information in electronic bulletin boards, chat rooms or online news groups.

For electronic bulletin boards, chat rooms and online news groups that are open to the public, the organizers or their higher authorities should conscientiously fulfill their confidentiality obligations, establish and improve the management system, and strengthen supervision and inspection. If confidential information is found, measures should be taken in time and reported to the local security department. Eleventh users who use e-mail for online information exchange shall abide by the relevant state secrecy regulations and shall not use e-mail to transmit, forward or copy state secret information.

Interconnected units and access units shall clarify the confidentiality requirements of the mail server users they manage and improve the management system. Twelfth interconnected units and access units should take safety education as an important part of international networking technology training. In the agreements and user codes signed between interconnected units and access units, and between access units and users, it shall be clearly stipulated that the State Secrecy Law shall be observed and no state secret information shall be disclosed. Chapter III Safety Supervision Article 13 The security departments at all levels shall have corresponding institutions or personnel to be responsible for the safety management of international networking of computer information systems, urge interconnected units, access units and users to establish and improve the information safety management system, and supervise and inspect the implementation of the provisions of the international networking safety management system.

For departments or units that have not established an information security management system or have unclear responsibilities, ineffective measures and chaotic management, and there are obvious hidden dangers that threaten the security of state secret information, the secrecy department shall order them to make rectification. If it still does not meet the confidentiality requirements after rectification, it shall be urged to stop international networking. Fourteenth security departments at all levels should strengthen the security inspection of computer information system international networking, and investigate and deal with all kinds of leaks according to law. Article 15 Interconnected units, access units and users shall accept and cooperate with the security supervision and inspection carried out by the security department, assist the security department in investigating and dealing with illegal acts of revealing state secrets through the Internet, and delete information related to state secrets on the Internet according to the requirements of the security department. Sixteenth interconnected units, access units and users, when discovering that state secrets have been leaked or may be leaked, shall immediately report to the security department or institution. Seventeenth security departments and institutions at all levels shall, when receiving reports or discovering online leaks, immediately organize investigation, urge relevant departments to take remedial measures in time, and supervise relevant units to delete online information involving state secrets within a time limit. Chapter IV Supplementary Provisions Article 18 The security management of computer information systems networked with Hongkong, Macao Special Administrative Region and Taiwan Province Province shall be implemented with reference to these Provisions. Article 19 The security management of international networking of military computer information systems may be formulated in accordance with these Regulations.